$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft File: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft (raw, json) Hash identifier: og96oCRnYGWanQa5+FhAX3YjAsmshfk9JVOO0a/mwRw= Subject key identifier: CF:3A:C1:BC:9E:23:AA:99:90:E8:EB:A1:1A:2C:AE:CD:59:6E:21:2C Authority key identifier: B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 Certificate issuer: /CN=A91CAE04/serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft Manifest number: 016E Signing time: Sat 23 Aug 2025 04:05:35 +0000 Manifest this update: Sat 23 Aug 2025 04:05:35 +0000 Manifest next update: Sat 30 Aug 2025 04:05:35 +0000 Files and hashes: 1: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl (hash: 3yQxxAxRcWTie1/icwqKvaZyhrA6QZUfV1x0K5up2zc=) 2: ABA6DCF0030F11EFB12D8A18C4F9AE02.roa (hash: 8DzejS8W4fMDZxY9d0U5Ub0yW6L6q7unUQ1/+VEKpFE=) 3: 7E40FBBA09EF11EFAA24237EC4F9AE02.roa (hash: M7N4nEDh5dyTQv8ASFX1wDCT+UJFNgGAfP+B+anOP+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:05:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAE04, serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Validity Not Before: Aug 23 04:05:35 2025 GMT Not After : Aug 30 04:05:35 2025 GMT Subject: CN=68a93e0f-ae2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3c:ed:fc:b1:d4:60:a6:44:a2:1e:2b:29:53: 9e:73:3f:e0:b4:a9:6c:f8:de:c4:b6:67:59:3a:4a: f6:2e:a3:e8:b4:7f:1b:ac:c6:8b:96:60:23:a7:11: 7f:6a:2f:a7:5d:68:e4:1f:fa:d5:f2:2b:c5:c1:2f: f4:3d:48:6e:d6:fc:95:b9:44:7e:f4:00:fb:ed:d9: bc:2e:ec:e6:f8:b0:00:f0:45:4d:9a:ba:4e:2a:14: 3f:8a:74:de:c3:89:2a:59:c1:f0:57:64:1f:e2:08: 74:de:7c:38:0a:74:dc:db:a2:a3:39:2c:88:4c:d4: 83:51:9a:44:5a:e8:7e:c0:c0:29:c6:27:48:06:84: 1e:f5:2b:d2:d1:c8:f3:2a:ce:a1:94:20:8d:dd:59: 71:f1:0f:e8:f1:98:9b:54:c9:5c:6f:c8:16:af:3b: 1f:9a:89:1a:f4:4e:46:60:d3:bb:6e:5b:20:f0:d6: 59:49:06:98:db:93:85:66:83:58:5a:17:24:4e:13: 87:d1:f1:c4:ac:c8:14:bd:0f:9f:73:5f:64:bf:e5: d0:35:93:26:6f:ac:5a:47:12:d1:f3:05:31:e8:e1: a8:1f:04:fa:a2:04:29:64:c7:27:ad:66:78:1f:2d: 5e:6b:d0:d0:a6:27:ee:2e:5c:9e:2e:13:95:a2:48: 67:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3A:C1:BC:9E:23:AA:99:90:E8:EB:A1:1A:2C:AE:CD:59:6E:21:2C X509v3 Authority Key Identifier: keyid:B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:bd:81:2a:ea:6d:ac:46:84:65:51:11:3a:19:11:46:93:05: ef:87:e7:4f:51:9a:cb:bd:ec:f4:0f:38:27:2a:1c:a7:46:ad: f8:06:c3:03:c8:50:65:62:ef:48:b7:d5:90:d1:78:8c:ce:f4: 34:0a:ed:e0:d7:b5:6e:a0:b8:a9:de:6c:d1:d4:3a:fe:14:d3: af:44:37:0c:61:01:ad:31:55:bd:27:f6:02:4a:b8:1a:8f:aa: 4f:9c:23:7c:d1:08:03:06:f7:35:a6:4f:6a:82:83:2e:a9:cf: 61:81:6e:6c:64:9a:f4:9b:49:ec:ac:c5:80:72:f2:84:a6:ba: c4:07:77:1c:ac:37:34:4f:39:b7:51:4f:a4:22:65:5a:d2:82: 04:31:aa:90:05:aa:09:4b:0a:60:e5:48:43:01:c0:72:b0:82: 26:e4:c1:d4:72:a5:49:ad:d8:cc:31:e3:a4:f9:c6:fb:a1:3c: 91:5e:4d:10:e9:73:8c:af:02:44:e3:8b:ba:4a:f8:85:f7:fd: 1b:d5:33:f8:cf:ea:b2:4c:9e:72:37:e9:7a:ef:99:92:d6:51: 0a:60:22:0e:04:95:e5:1c:f7:f2:bd:32:a0:87:3a:db:75:33: 28:a8:9c:04:e1:2f:24:88:c0:eb:a3:81:a1:b8:bf:9c:82:2a: 1d:5c:d9:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FFMDQxMTAvBgNVBAUTKEIzNjI0MzdBQjY3RDI5MEM1Q0RGRUYyRjYyQjc3RURE OEE5RkZBNDQwHhcNMjUwODIzMDQwNTM1WhcNMjUwODMwMDQwNTM1WjAYMRYwFAYD VQQDEw02OGE5M2UwZi1hZTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDzt/LHUYKZEoh4rKVOecz/gtKls+N7EtmdZOkr2LqPotH8brMaLlmAjpxF/ ai+nXWjkH/rV8ivFwS/0PUhu1vyVuUR+9AD77dm8Luzm+LAA8EVNmrpOKhQ/inTe w4kqWcHwV2Qf4gh03nw4CnTc26KjOSyITNSDUZpEWuh+wMApxidIBoQe9SvS0cjz Ks6hlCCN3Vlx8Q/o8ZibVMlcb8gWrzsfmoka9E5GYNO7blsg8NZZSQaY25OFZoNY WhckThOH0fHErMgUvQ+fc19kv+XQNZMmb6xaRxLR8wUx6OGoHwT6ogQpZMcnrWZ4 Hy1ea9DQpifuLlyeLhOVokhndQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM86wbye I6qZkOjroRosrs1ZbiEsMB8GA1UdIwQYMBaAFLNiQ3q2fSkMXN/vL2K3ft2Kn/pE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUUwNC85RDhGNzcyQTVG OTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtReGMzLTh2WXJkLTNZcWYt a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MySkRlclo5S1F4YzMtOHZZcmQtM1lxZi1rUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUUwNC85RDhGNzcyQTVGOTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtR eGMzLTh2WXJkLTNZcWYta1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyvYEq6m2sRoRlURE6GRFGkwXvh+dPUZrLvez0DzgnKhynRq34BsMD yFBlYu9It9WQ0XiMzvQ0Cu3g17VuoLip3mzR1Dr+FNOvRDcMYQGtMVW9J/YCSrga j6pPnCN80QgDBvc1pk9qgoMuqc9hgW5sZJr0m0nsrMWAcvKEprrEB3ccrDc0Tzm3 UU+kImVa0oIEMaqQBaoJSwpg5UhDAcBysIIm5MHUcqVJrdjMMeOk+cb7oTyRXk0Q 6XOMrwJE44u6SviF9/0b1TP4z+qyTJ5yN+l675mS1lEKYCIOBJXlHPfyvTKghzrb dTMoqJwE4S8kiMDro4GhuL+cgiodXNk8 -----END CERTIFICATE-----Generated at Sun Aug 24 00:49:55 2025 by rpki-client